Arsen Security (@arsen) / X

Arsen Security

295 posts

Arsen Security

@arsen

🛡️ Security Awareness for the age of AI — ✨ AI-driven vishing, smishing, and phishing — 🌐 arsen.co

🇺🇸 USA 🇬🇧 UK 🇫🇷 France

Joined March 2020

Arsen Security
@arsen
Jul 20
ClickFix and vishing attacks are evolving fast, making social engineering an ever growing threat. See the latest campaigns uncovered by @msftsecurity, @GroupIB & @kaspersky; and how @arsen helps train your team. 👇
Weekly Cyber Digest - Week of July 20, 2026
From linkedin.com
Arsen Security
@arsen
Jul 10
🚨 @okta details a vishing campaign where @Microsoft365 users are tricked into enrolling attacker-controlled Entra passkeys. Time to test these workflows with company-scale vishing simulations. 👇
okta.com
Vishing actors target Entra passkey enrollment | Okta Threat Intelligence
Arsen Security
@arsen
Jul 8
💡ClickFix is a type of social engineering attack that makes people run malware on their own without the attacker needing to use an exploit. Learn more: arsen.co/en/resources/c…
Unit 42
@Unit42_Intel
Jul 6
We are tracking a MaaS #ClickFix operation using Polygon #blockchain as a resilient C2 config store. So far, 130+ compromised sites with 15 rotating C2s. Victim telemetry is periodically exfiltrated and stage 3 execution drops an infostealer. Details at bit.ly/4fmKZ8g
Arsen Security
@arsen
Jul 6
Your finance teams are under attack. AI-assisted voice phishing and deepfake calls are driving fraudulent transfer approvals. Awareness isn't enough. Train the right reflex.
Why Train Financial Services Teams Against Vishing
From arsen.co
Arsen Security
@arsen
Jun 15
#Web3 @Humanityprot & @Quantstamp dropped a thorough postmortem on the "$H" token compromise. Root cause? Spear-phishing. No technical vulnerability was exploited, just one targeted email. Our breakdown below 👇
Humanity
@Humanityprot
Jun 12
Article
$H Incident: Tooling Linked to North Korean Actors
Today we’re publishing the findings of the independent investigation conducted by @Quantstamp, Inc into the $H token compromise on June 8, 2026. Quantstamp's findings show that the attacker used...